CVE-2026-116596None▾ SunlitPyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISync…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in its PyrusSyncService Windows service, which allow an attacker with unprivileged access to create files using the ISyncService contract.
sync < 1.8.745.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116471Medium· 4.3BKWLD Decoy Authorization Policy Policy.php privileges management
CVE-2026-116384Medium· 6.3Bdtask Garage 24 Garage Management Software Backend improper authorization
CVE-2026-116368High· 7.3DeepSeek Harness Browser Auth browser-auth.ts improper authorization
CVE-2026-116274Medium· 4.3JIZHICMS Front-end Order OrderController.php pay improper authorization
CVE-2026-116223Medium· 6.5icret EasyImage del.php privileges management
CVE-2026-116106High· 7.3HeyCyan App FileProvider access control